JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.242.240.166

Recent Activity

Abuse Confidence Score

100% Critical

34 reports

28 reporters · latest 3 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 166.240.242.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

34 from 28 distinct reporters

First reported

November 6th 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 13 🇩🇪 Germany 6 🇨🇿 Czechia 4

Most common categories Web App Attack 26 Hacking 11 Bad Web Bot 9 Brute-Force 8 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-11-06 19:44:58 UTC · (3 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇮 as211431.net	2026-11-06 19:38:38 UTC · (3 hours ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php~ UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot This report ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php~ UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-11-06 18:29:35 UTC · (4 hours ago)	Apache vulnerability scan	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-11-06 17:59:44 UTC · (4 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 Jarda_H	2026-11-06 17:33:26 UTC · (5 hours ago)	http-path-traversal-probing	Web App Attack
🇵🇱 bmino.pl	2026-11-06 16:54:42 UTC · (6 hours ago)	Autoban IP(2): 35.242.240.166 - Hostname: Google LLC - City: Frankfurt - Country: Germany - Organization: Google Cloud (europe-west3) - Reason: GET /wp/.env HTTP/2.0	Web App Attack
🇩🇪 Mr-Money	2026-11-06 16:47:09 UTC · (6 hours ago)	scenario: crowdsecurity/http-probing - events: 11	Web App Attack Hacking
🇳🇱 Mangelot Hosting	2026-11-06 16:34:43 UTC · (6 hours ago)	(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 35.242.240.166 (DE/Germany/166.240.242.35.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇳🇱 middelkoopcc	2026-11-06 16:14:01 UTC · (6 hours ago)	2026-11-06 17:12:11 GET /ngsw.json [404] && 2026-11-06 17:12:11 GET /sa.json [404] && 2026-11-06 17:12:11 GET /google-credentials.json [404] && 112 more within 20 minutes	Web App Attack
🇺🇸 lavnet.net	2026-11-06 16:04:36 UTC · (6 hours ago)	35.242.240.166 - - [06/Nov/2026:16:04:35 +0000] "GET /robots.txt HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 35.242.240.166 - - [06/Nov/2026:16:04:35 +0000] "GET /sitemap.xml HTTP/2.0" 404 1855 "-" "Mozill ... show more 35.242.240.166 - - [06/Nov/2026:16:04:35 +0000] "GET /robots.txt HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 35.242.240.166 - - [06/Nov/2026:16:04:35 +0000] "GET /sitemap.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 35.242.240.166 - - [06/Nov/2026:16:04:35 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 35.242.240.166 - - [06/Nov/2026:16:04:36 +0000] "GET /settings/team HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" 35.242.240.166 - - [06/Nov/2026:16:04:36 +0000] "GET /mxcc0z7jukerpf8eitzm HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.242.240.16 ... show less	Brute-Force
🇦🇺 nzhost.co.nz	2026-11-06 15:48:20 UTC · (7 hours ago)	$f2bV_matches	Hacking Brute-Force
🇺🇸 iwle	2026-11-06 15:42:24 UTC · (7 hours ago)	[Fri Nov 06 10:42:22.019336 2026] [:error] [pid 909453:tid 909501] [client 35.242.240.166:49492] [client 35.242.240.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/a ... show more [Fri Nov 06 10:42:22.019336 2026] [:error] [pid 909453:tid 909501] [client 35.242.240.166:49492] [client 35.242.240.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "app.iwle.com"] [uri "/wp-config.php.old"] [unique_id "au31XiVHIiDCBTBVq13ZfQAAABQ"] [Fri Nov 06 10:42:22.020922 2026] [:error] [pid 909453:tid 909481] [client 35.242.240.166:49462] [client 35.242.240.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S ... show less	Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-11-06 15:21:00 UTC · (7 hours ago)	2026-11-06 @ 16:20:45 (CET) ~ Blocked for trying to access: /graphql	Web App Attack
🇳🇱 Alt255	2026-11-06 15:12:15 UTC · (7 hours ago)	[ti-12al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 35.242.240.166 - - \[06/Nov/2026:16:12:06 +0100\] "GET /api/system/fileView\?file=/app/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 $compatible\; Bytespider ... show more [ti-12al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 35.242.240.166 - - \[06/Nov/2026:16:12:06 +0100\] "GET /api/system/fileView\?file=/app/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Bytespider\; [email protected]$ AppleWebKit/537.36" 35.242.240.166 - - \[06/Nov/2026:16:12:06 +0100\] "GET /wp-config.php.bak HTTP/2.0" 403 457 "-" "Mozilla/5.0 $compatible\; Bravebot/1.0\; +https://brave.com/search/$" 35.242.240.166 - - \[06/Nov/2026:16:12:06 +0100\] "GET /wp-config.php.old HTTP/2.0" 404 1864 "-" "Mozilla/5.0 $compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler$" 35.242.240.166 - - \[06/Nov/2026:16:12:06 +0100\] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 1850 " ... show less	Bad Web Bot Web App Attack
Anonymous	2026-11-06 15:01:03 UTC · (7 hours ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇾 205.209.65.70

🇧🇷 191.5.67.42

🇺🇸 147.185.132.144

🇺🇸 129.213.151.234

🇺🇸 162.241.149.132

🇵🇱 95.214.54.159

🇷🇺 95.72.205.157

🇷🇺 82.147.84.246

🇺🇸 68.227.77.50

🇺🇸 54.145.125.179

🇺🇸 52.54.15.103

🇸🇬 45.78.207.244

🇮🇩 43.157.200.91

🇻🇳 171.237.179.159

🇫🇷 161.97.132.53

🇺🇸 136.144.42.154

🇨🇳 106.13.124.200

🇺🇸 66.132.186.249

🇸🇬 43.134.85.158

🇺🇸 178.128.71.76